Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa
File:                     2989c075-16ad-3a9b-897b-49fa16151d29.roa (raw, json)
Hash identifier:          TKStW59n5ZmqdvrqiyEDzyzhvi8aHYUtqv0K5JPhL/8=
Subject key identifier:   2A:8B:DB:1B:8E:F9:DF:E9:3D:A2:43:C2:F2:31:0F:7D:D9:CA:EB:7E
Certificate issuer:       /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
Certificate serial:       010D0C9F43285848E16BD3CC2B4BB904218EB480
Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     21928
IP address blocks:        173.96.0.0/11 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:d3:cc:2b:4b:b9:04:21:8e:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=5dd21a90-a3c0-434a-bd28-a4ff3eea9128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:f7:3f:9a:8c:4f:c8:a2:08:83:99:31:6d:
                    c2:94:a5:3c:25:45:f9:d3:78:a4:5a:b3:99:be:74:
                    28:2e:3f:ee:13:68:6a:06:03:59:dd:3e:68:37:6c:
                    8a:87:45:15:8c:6d:83:c2:b7:a5:45:d3:b0:b8:32:
                    36:54:38:85:7d:ae:26:73:dc:49:0b:26:86:0d:14:
                    9c:7c:a8:99:9f:6f:27:5a:60:35:4c:71:4f:67:38:
                    4e:3e:19:aa:b4:ec:0e:37:3a:b6:c0:ca:aa:a3:8e:
                    9f:5d:69:b1:38:d5:e8:28:b4:49:b7:d8:86:0a:66:
                    40:1d:36:0c:cf:f1:23:66:90:35:37:09:0c:58:54:
                    8d:c3:d7:a7:96:4d:fb:bf:06:33:6f:28:37:9d:60:
                    64:f6:dc:bf:6f:5d:03:4c:02:7c:2c:ef:68:1e:4a:
                    6a:b8:a4:fa:c4:cd:7b:d4:21:3f:41:54:57:1f:d1:
                    48:3c:bf:4d:1e:d5:d0:bb:c4:dd:d8:3d:7e:1b:0b:
                    d5:3d:d0:e7:b7:a0:a8:e8:0c:eb:91:5d:6e:73:8d:
                    50:09:e2:fd:1b:5d:28:cf:a7:ae:2c:2b:2f:77:3f:
                    bd:20:97:62:62:74:96:12:9c:9a:37:4c:c4:dc:3a:
                    3e:33:e5:76:d5:d2:89:06:f6:3e:be:00:42:4b:00:
                    66:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:DB:1B:8E:F9:DF:E9:3D:A2:43:C2:F2:31:0F:7D:D9:CA:EB:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/2989c075-16ad-3a9b-897b-49fa16151d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl

            X509v3 Authority Key Identifier:
                keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.96.0.0/11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:49:7e:07:ff:95:e9:18:82:07:ef:2d:13:3c:46:62:c0:95:
         8f:63:44:b0:a0:27:c8:72:74:98:39:e3:ab:bb:62:b9:6f:ac:
         d4:d0:23:36:97:d7:3c:1f:79:22:af:5f:7b:09:96:d0:95:e2:
         0d:5b:10:53:04:f5:33:99:65:e5:97:2b:86:1e:24:a7:48:9c:
         84:08:81:fe:e5:aa:63:dc:73:ff:3a:ce:e4:42:f8:f4:f0:9f:
         cc:88:30:54:bf:f2:67:a5:61:c6:b7:29:90:6b:9a:6d:c1:20:
         a3:fe:1c:8e:28:40:6d:5a:42:ac:b1:39:1b:fa:f3:f2:31:95:
         84:60:7c:9a:34:bf:54:7e:31:a6:1a:57:61:36:e1:d6:bd:cb:
         b0:64:ce:07:a8:c3:18:df:b8:1a:9b:02:3a:1e:b9:8e:98:d0:
         55:6d:63:b2:92:58:7d:15:01:e6:25:99:42:d3:a6:d4:46:2e:
         91:eb:81:be:74:7c:f0:70:b6:ff:77:7a:32:fb:af:6e:73:cc:
         19:29:e8:79:ba:ad:92:4c:88:7b:dc:8e:14:e0:2f:19:86:94:
         7f:a6:d5:e2:e6:33:7c:4f:b5:e7:74:f5:88:7a:ee:c9:83:0a:
         89:f9:5f:3a:03:e5:b0:c2:7f:64:fc:27:e5:a2:82:76:e3:24:
         c2:80:11:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:13:21 2025 by rpki-client